Microsoft will stop issuing free security updates for Windows 10 on October 14, 2025, but the company has quietly opened a one-year, $30 safety net for home users who aren’t ready or able to upgrade to Windows 11. With an estimated 240 million PCs worldwide still running the decade-old operating system, the looming cutoff is forcing millions of people to decide whether to pay a small fee for continued protection, move to a new OS, or risk running an unsupported machine.

Microsoft confirmed the end-of-support date and the new Consumer Extended Security Updates (ESU) program through its public lifecycle documentation and recent YouTube presentations. For the first time, the ESU program—previously reserved for enterprise customers—is available to anyone with a personal Windows 10 device. The clock is ticking, and the decisions made in the coming months will affect how secure those aging PCs remain through 2026 and beyond.

Why Microsoft Is Cutting the Cord on October 14

Windows 10 launched in July 2015, and its mainstream support was originally set to expire in 2025 under Microsoft’s fixed 10-year lifecycle policy. That policy provides five years of mainstream support, including feature updates and free phone/chat assistance, followed by five years of extended support with security-only fixes. For Windows 10, version 22H2—the final feature update released in late 2022—the extended support period ends on October 14, 2025.

After that date, the operating system will no longer receive security patches for newly discovered vulnerabilities. That means every unpatched bug discovered after October 14 becomes a permanent open door for attackers. A Windows 10 PC will still boot and run, but it will become increasingly dangerous to use for anything connected to the internet.

Microsoft has not explicitly said it will not grant a last-minute reprieve, but the company’s messaging is clear: Windows 11 is the future. The new Consumer ESU is a bridge, not a extension of the platform's lifespan. In a YouTube video outlining the changes, Microsoft representatives presented the Consumer ESU as a one-time, 12-month offer that will not be repeated.

What Actually Ends—and What Doesn’t

On October 14, 2025, the following support stops for all mainstream editions of Windows 10:

  • Monthly security updates delivered through Windows Update.
  • Out-of-band emergency patches for critical zero-day vulnerabilities.
  • Reliability and quality improvements (non-security fixes).
  • Technical support from Microsoft for consumer editions.

There are a handful of exceptions. Enterprise-specific SKUs—such as LTSC (Long-Term Servicing Channel) and certain IoT editions—follow separate lifecycle calendars, some extending into the 2030s. Microsoft 365 Apps (Word, Excel, Outlook, etc.) will continue to receive security updates on Windows 10 until October 10, 2028, but those updates only protect the applications, not the underlying OS kernel, drivers, or system services. Running Microsoft 365 on an unpatched OS after October 2025 is a lot like locking the front door while leaving the windows open.

Third-party antivirus software will still function, and browsers like Chrome and Edge will likely keep supporting Windows 10 for some time. But without OS-level patches, the foundation remains riddled with known flaws. Attackers often reverse-engineer monthly Patch Tuesday updates to find and exploit unpatched systems, so the risk rises sharply after the first missed update cycle.

The $30 Safety Net: Consumer Extended Security Updates

For the first time in Windows history, Microsoft is selling a consumer ESU. The program provides critical security updates for Windows 10 for one additional year, from October 15, 2025 through October 13, 2026. There are three ways to enroll:

  1. Sync your Windows settings to a Microsoft account – This free route simply requires signing into Windows with a Microsoft account and enabling settings sync. The ESU enrollment option appears in Settings > Update & Security > Windows Update after you sign in.
  2. Redeem 1,000 Microsoft Rewards points – If you use Microsoft Rewards, you can cash in the points for the ESU at no additional cost.
  3. Pay a one-time $30 fee (plus tax) – The fee covers up to 10 devices that are signed into the same Microsoft account. That works out to $3 per PC for a year of security patches—a steep discount compared to the enterprise ESU pricing.

However, the program comes with fine print. ESU updates are “security only”—they fix vulnerabilities but do not include feature improvements, driver updates, or technical support. Enrollment also requires Windows 10 version 22H2 and the latest monthly cumulative update installed. Microsoft is rolling out the enrollment option in stages; not every eligible PC will see the sign-up link immediately. If your device is eligible but the link doesn’t appear, Microsoft recommends checking back periodically before October 14.

Your Other Options: Upgrade, Migrate, or Switch

For most users, upgrading to Windows 11 is the cleanest long-term solution. Windows 11 brings modern security features like hardware-enforced stack protection, virtualization-based security, and more granular permission controls. The upgrade from Windows 10 to 11 is free for devices that meet the hardware requirements.

But those hardware requirements are strict: a compatible 64-bit processor (Intel 8th-gen or AMD Ryzen 2000 series and newer), UEFI firmware with Secure Boot, and TPM 2.0. Microsoft publishes the PC Health Check tool to test compatibility quickly. Many perfectly functional PCs—some only five or six years old—fail the check and are ineligible for the upgrade.

For those machines, other paths exist:

  • Cloud-hosted Windows 11 – Microsoft’s Windows 365 Cloud PC and Azure Virtual Desktop services let users stream a Windows 11 desktop from the cloud to an older device. Businesses that use these services may receive ESU for their connecting Windows 10 endpoints at no extra charge, according to Microsoft’s YouTube presentation. This is primarily an enterprise play, but tech-savvy home users can explore similar setups.
  • Switch to an alternative OS – Linux distributions like Ubuntu, Mint, or Fedora can breathe new life into aging hardware and are free. ChromeOS Flex from Google is another option that turns older PCs into Chromebook-like devices. The trade-off: Windows-only software won’t run natively, and peripheral support can be hit or miss.
  • Stay on Windows 10 without ESU – This is the riskiest choice. It costs nothing upfront but exposes the machine to an ever-growing pile of unpatched vulnerabilities. Security researchers often see spikes in malware targeting end-of-life operating systems.

What to Do This Week—and Before the Summer Ends

The clock is loud, but not yet deafening. Here’s a practical timeline for home users and small business owners:

This week (early June 2025):
- Check your Windows 10 version: Go to Settings > System > About and confirm you’re on version 22H2. If not, run Windows Update until no more updates are available.
- Run the PC Health Check app to see if your device can upgrade to Windows 11.
- Backup all important files to an external drive or cloud service and test that the backup can be restored.

By early August 2025:
- If your PC is Windows 11-eligible and your applications are compatible, schedule the in-place upgrade. Allow an hour or two; the process is largely automated.
- If your PC is not eligible, decide between paying for ESU, switching to an alternative OS, or replacing the hardware.
- Start the ESU enrollment if you see the link. If not, make sure you’re signed in with a Microsoft account and check back.

By September 2025:
- Execute your plan. Do not wait until the last week of September—upgrade servers get hammered, and technical hiccups are common.
- If you’ve enrolled in ESU, verify that updates are downloading after October 14 by checking Windows Update manually a few days later.

For Business: The Three-Year ESU Path and Its Staggering Cost

Organizations that need more time to migrate can purchase the enterprise ESU through Microsoft Volume Licensing. The pricing is drastically different from the consumer program:

  • Year 1 (Oct 2025 – Oct 2026): $61 per device
  • Year 2 (Oct 2026 – Oct 2027): $122 per device
  • Year 3 (Oct 2027 – Oct 2028): $244 per device

Education customers get a significant discount, but the structure remains the same. There is no free tier or Rewards point redemption. ESU for enterprises covers only critical and important security updates; it does not provide any technical support beyond what is already covered in an existing support agreement.

For a company with 500 Windows 10 PCs that cannot be upgraded immediately, Year 1 alone costs $30,500. If they need all three years, the total per device is $427, and the fleet tab hits $213,500. That amount often covers a substantial hardware refresh, which is why IT analysts recommend using ESU only as a stopgap while actively replacing or migrating endpoints.

Enterprise IT teams should begin a 90-day sprint now:
1. Inventory all devices and their Windows 11 compatibility.
2. Triage: classify each device as “upgradeable,” “needs ESU,” “replace now,” or “cloud-migrate.”
3. Pilot Windows 11 on representative hardware and business-critical applications.
4. Budget for hardware procurement and ESU licenses where necessary.
5. Use management tools like Intune or Configuration Manager to automate upgrades and policy enforcement.
6. Update cybersecurity risk registers and notify compliance officers.

The cloud path can reduce immediate capital costs. Connecting legacy devices to Windows 365 Cloud PCs or Azure Virtual Desktop not only provides a managed Windows 11 environment but may also grant those connecting devices ESU at no additional fee, according to Microsoft’s advisory. This option is particularly attractive for organizations with large fleets of older but still functional laptops.

Will Microsoft Extend the Deadline? Probably Not

Consumer advocacy groups and tech commentators have criticized Microsoft for setting a hard deadline that strands so many perfectly usable PCs. The strict TPM 2.0 and CPU requirements for Windows 11 have drawn accusations of forced obsolescence, especially in regions where new hardware is costly. Some have called on Microsoft to extend support or relax the Windows 11 hardware requirements.

Microsoft, however, has shown no sign of wavering. The company has publicly committed to the October 14, 2025 date in multiple official channels. The consumer ESU program itself is presented as a final, one-off accommodation—not a starting point for future extensions. Privately, Microsoft engineers point to the security advantages of TPM 2.0 and Secure Boot, arguing that continuing to support older hardware would undermine the security baseline they want to establish across the ecosystem.

What’s more, the financial incentive for Microsoft is clear: pushing users to Windows 11 increases engagement with Microsoft 365, OneDrive, and the Microsoft Store, while reducing the cost of maintaining multiple codebases.

The Bottom Line

October 14, 2025, is not just another Patch Tuesday. It’s a hard fork in the road for the Windows 10 user base. For home users, $30 buys one year of breathing room—enough time to save for a new PC or plan a migration to Linux. For businesses, the math is harsher: either invest in new hardware or pay escalating ESU fees.

The most dangerous choice is doing nothing. Unpatched operating systems become low-hanging fruit for cybercriminals within weeks of end-of-support. The steps you take this summer will determine whether your devices remain secure and functional through 2026.

Check your version, run the compatibility tool, back up your data, and pick a path. The safety net is there, but it won’t hold forever.